Internet identity system works but it’s far from ideal. Unidentified entities are more likely to get black listed from part of the open internet than to be white listed. Identified entities that should normally be whitelisted may get blocked based on their traffic source. It’s less risky to deny than to allow.

Blacklists are shared extensively among internet services providers. Whitelists are not. There’s a huge margin of error in these lists and no clear way to appeal. In fact, personal email servers are blacklisted by default from other big email providers and that is just one example.

This approach is alluring for well connected organizations but dissatisfying for small and less connected ones as well as individuals. Hence, whitelisting is less appreciated, used and developed. No economic incentive for major providers.

nostr may change that.